DeutschShown in its original language — a full translation is planned for a future version.
Snipe-IT: Mehrere Schwachstellen
view advisory published 2026-06-24
Ein Angreifer kann mehrere Schwachstellen in Snipe-IT ausnutzen, um Dateien zu manipulieren, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen und um beliebigen Programmcode auszuführen.
01
describes (17)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-61807US | medium6.1 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, a stored manufacturer or supplier name passed as the table component $name becomes data-selected-count-id in reso… | ||||
| CVE-2026-55515US | — | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the unaccepted-assets report delete endpoint authorizes only reports.view and deletes CheckoutAcceptance::pending… | ||||
| CVE-2026-55479US | medium4.3OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the legacy single-seat license checkin flow authorizes the action with the checkout permission instead of the che… | ||||
| CVE-2026-55475US | —OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.1, the Importer API endpoint allows a user with CSV import capabilities and a valid API key to overwrite the created… | ||||
| CVE-2026-55469US | — | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import and assets.update permissions can place a path traversal string in an asset ima… | ||||
| CVE-2026-55466US | high8.7 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UploadFileRequest sanitizes SVG content only when PHP finfo reports image/svg+xml and UploadedFilesController ser… | ||||
| CVE-2026-55462US | —OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, UsersController::show() and printInventory() authorize only user viewing before loading and rendering assigned li… | ||||
| CVE-2026-55461US | — | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, the user edit flow stores url()->previous() from the attacker-controlled Referer header into Laravel’s intended U… | ||||
| CVE-2026-55452US | high7.3 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.5.0, Actionlog::logaction() stores the request User-Agent header and ReportsController::postActivityReport() writes th… | ||||
| CVE-2026-55843US | medium6.5 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.0, UsersController::update() passes a missing permission request field through NormalizePermissionsPayloadAction and… | ||||
| CVE-2026-55516US | — | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, PATCH or PUT /api/v1/maintenances/{maintenance_id} checks access to the current maintenance record and asset but… | ||||
| CVE-2026-55478US | medium5.4 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, POST /api/v1/kits/{kit_id}/licenses checks whether the caller can edit kits but does not authorize access to the… | ||||
| CVE-2026-55476US | medium4.3OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.0, POST /account/request/{itemType}/{itemId}/{cancel_by_admin?}/{requestingUser?} accepts cancel_by_admin as a URL p… | ||||
| CVE-2026-55474US | medium6.5 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the route filename parameter into a private upload-directory path wi… | ||||
| CVE-2026-55472US | —OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, when Full Multiple Companies Support and scope_locations_fmcs are enabled, the API location creation endpoint det… | ||||
| CVE-2026-55464US | medium5.4 | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, CommonMark escapes raw HTML but does not sanitize javascript: URIs in Markdown hyperlinks, allowing a user with a… | ||||
| CVE-2026-55460US | —OT elevated | — | ||
Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated non-admin user with users.view and users.edit but without users.delete can directly POST to /use… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-35cr-9hqq-p2mg vom 2026-06-24external
- GitHub Security Advisory GHSA-53jc-27pc-x8r8 vom 2026-06-24external
- GitHub Security Advisory GHSA-575r-357h-fhch vom 2026-06-24external
- GitHub Security Advisory GHSA-5wx7-xq8j-v4qm vom 2026-06-24external
- GitHub Security Advisory GHSA-8frh-vhgh-64cf vom 2026-06-24external
- GitHub Security Advisory GHSA-8w8c-8mx9-52cw vom 2026-06-24external
- GitHub Security Advisory GHSA-c6f4-wj38-m3g3 vom 2026-06-24external
- GitHub Security Advisory GHSA-c8qc-wf67-342w vom 2026-06-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan